If we want to do this wouldn't it make more sense to do it
by having qemu dynamically load a plugin DLL with a specified
ABI rather than having to compile the specific backdoor
handler into qemu proper?

No way. If you want to implement a custom device, then send a proper patch.
We're not adding hooks to let people add random things like this.